Re: [MMUSIC] WGLC for draft-ietf-mmusic-delayed-duplication-01

Ari Keränen <ari.keranen@ericsson.com> Tue, 23 April 2013 22:27 UTC

Return-Path: <ari.keranen@ericsson.com>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6899321F8D29 for <mmusic@ietfa.amsl.com>; Tue, 23 Apr 2013 15:27:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.79
X-Spam-Level:
X-Spam-Status: No, score=-5.79 tagged_above=-999 required=5 tests=[AWL=0.159, BAYES_00=-2.599, HELO_EQ_SE=0.35, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E19zrvniOuvC for <mmusic@ietfa.amsl.com>; Tue, 23 Apr 2013 15:27:45 -0700 (PDT)
Received: from mailgw1.ericsson.se (mailgw1.ericsson.se [193.180.251.45]) by ietfa.amsl.com (Postfix) with ESMTP id 6469121F8D92 for <mmusic@ietf.org>; Tue, 23 Apr 2013 15:27:44 -0700 (PDT)
X-AuditID: c1b4fb2d-b7f316d0000028db-80-51770adf091e
Received: from esessmw0191.eemea.ericsson.se (Unknown_Domain [153.88.253.125]) by mailgw1.ericsson.se (Symantec Mail Security) with SMTP id 42.FC.10459.FDA07715; Wed, 24 Apr 2013 00:27:43 +0200 (CEST)
Received: from mail.lmf.ericsson.se (153.88.115.8) by esessmw0191.eemea.ericsson.se (153.88.115.85) with Microsoft SMTP Server id 8.3.279.1; Wed, 24 Apr 2013 00:27:43 +0200
Received: from nomadiclab.lmf.ericsson.se (nomadiclab.lmf.ericsson.se [131.160.33.3]) by mail.lmf.ericsson.se (Postfix) with ESMTP id 0936A2549; Wed, 24 Apr 2013 01:27:43 +0300 (EEST)
Received: from nomadiclab.lmf.ericsson.se (localhost [127.0.0.1]) by nomadiclab.lmf.ericsson.se (Postfix) with ESMTP id 75AC654D34; Wed, 24 Apr 2013 01:27:42 +0300 (EEST)
Received: from As-MacBook-Air.local (localhost [127.0.0.1]) by nomadiclab.lmf.ericsson.se (Postfix) with ESMTP id BA01954A3A; Wed, 24 Apr 2013 01:27:41 +0300 (EEST)
Message-ID: <51770ADD.6080702@ericsson.com>
Date: Wed, 24 Apr 2013 01:27:41 +0300
From: Ari Keränen <ari.keranen@ericsson.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20130328 Thunderbird/17.0.5
MIME-Version: 1.0
To: draft-ietf-mmusic-delayed-duplication@tools.ietf.org
References: <515F03F3.6070400@ericsson.com>
In-Reply-To: <515F03F3.6070400@ericsson.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: ClamAV using ClamSMTP
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrOLMWRmVeSWpSXmKPExsUyM+Jvre59rvJAgwfXZS32X7zNajF1+WMW ByaPJUt+Mnl8ufyZLYApissmJTUnsyy1SN8ugStj765jrAXzmCr2L73P1MD4mLGLkZNDQsBE 4tu1iewQtpjEhXvr2boYuTiEBE4xSsw/9Z8FwtnAKNH5dQIrhLObUWLOhIlMEM46RonVm7ZD OSuAeibfAhvGK6AtsX/ZDGYQm0VAVWL5o1awOJuAvcTNCdfBbFGBZImlO5eyQdQLSpyc+YQF xBYRsJB48P0U2IHMAjISM842MoHYwgLuEnuWvwHq5QBapi3xfo42SJhTQEfi0ZYfTBDlthIX 5lxngbDlJba/ncMM8ZuaxNVzm8BsIaBzrv57xTiBUXQWks2zkLTPQtK+gJF5FSN7bmJmTnq5 4SZGYOAf3PJbdwfjqXMihxilOViUxHnDXC8ECAmkJ5akZqemFqQWxReV5qQWH2Jk4uCUamBM /i/xM/N35//spykB6t+cQhPK2KvrxAtffJ5y89mWU9mhrAlnFilM7Trtcfdz3qflsfZPXPSX 7Cz4zpL6pL/2gGqzsMzCdeZuE/atm7z2bPy5iANT79Tt6903tShxrxqDeElFT+1kX035Scs1 8ypCTi/tFf029Q7TBL436y+Z3XQ/UZT6z6NUiaU4I9FQi7moOBEA+fSz50oCAAA=
Cc: mmusic <mmusic@ietf.org>
Subject: Re: [MMUSIC] WGLC for draft-ietf-mmusic-delayed-duplication-01
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mmusic>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 23 Apr 2013 22:27:45 -0000

Hi,

I reviewed the draft and noticed that in the intro section you mention a 
possible DoS attack using the delayed duplication functionality, but 
it's not discussed at all in the security considerations section. Should 
that be addressed too?


Cheers,
Ari (as individual)